Re: FreeBSD UFS vulnerability: Is NIST off its medication, or am I missing something?

2006-11-14 Thread Bill Moran
In response to Colin Percival [EMAIL PROTECTED]: Bill Moran wrote: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5824 Following the links around, it seems that you would have to mount a corrupt or malicious filesystem in order to exploit this vulnerability. Yes, NIST claims there

FreeBSD UFS vulnerability: Is NIST off its medication, or am I missing something?

2006-11-13 Thread Bill Moran
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5824 Following the links around, it seems that you would have to mount a corrupt or malicious filesystem in order to exploit this vulnerability. Yes, NIST claims there is no authentication required to exploit? Are new versions of FreeBSD suddenly

Re: FreeBSD UFS vulnerability: Is NIST off its medication, or am I missing something?

2006-11-13 Thread Colin Percival
Bill Moran wrote: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5824 Following the links around, it seems that you would have to mount a corrupt or malicious filesystem in order to exploit this vulnerability. Yes, NIST claims there is no authentication required to exploit? Are new